A Development Team Releases Updates to an Application Regularly

question 62

Multiple Choice

A development team releases updates to an application regularly. The application is compiled with several standard, open-source security products that require a minimum version for compatibility. During the security review portion of the development cycle, which of the following should be done to minimize possible application vulnerabilities?

• A) The developers should require an exact version of the open-source security products, preventing the introduction of new vulnerabilities.
• B) The application development team should move to an Agile development approach to identify security concerns faster.
• C) The change logs for the third-party libraries should be reviewed for security patches, which may need to be included in the release
• D) The application should eliminate the use of open-source libraries and products to prevent known vulnerabilities from being included

---

Definitions:

Parametric Tests

Statistical tests based on assumptions about the population distribution from which the sample is drawn, typically involving parameters like mean and standard deviation.

Normal Approximation

A method used to estimate the shape of a binomial distribution using a normal distribution when the sample size is large.

Sign Test

A non-parametric test used to determine if there is a statistically significant difference between paired or matched samples by examining the signs of differences without assuming any particular distribution.

Obstacle Courses

Physical or metaphorical challenges composed of multiple obstacles that require agility, strength, and strategic thinking to navigate or overcome.